[HADOOP-17005] Add capability in hadoop-client to automatically login from a client/service keytab

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 3.2.1
• Component/s: security
• Assignee: Unassigned
• Reporter: Maziar Mirzazad
• Created: 22/Apr/20 01:16
• Updated: 26/Apr/20 21:19

Description

With existing Hadoop client implementation, client applications for services that are using kerberized clusters, need to handle Keytab based login in their code, before doing HDFS or M/R API calls.

To avoid that, we are proposing adding Keytab based auto login to hadoop client library with configurable and default paths for Keytabs.
This functionality helps new service owners as well as those transitioning from non-kerberized cluster to kerberized ones.

Auto login, should avoid extra login attempts in case a valid TGT is already available.